Shopify recently added more resilient recovery for lost refresh responses. We need the same for cycling a non-expiring offline token to an expiring pair. Losing that response permanently orphans the install: the old shpat_ is destroyed, retry returns invalid_subject_token, and the only fix is mercha…

[image] Jon_Purvis: Shopify is full of smart people, so I don’t understand how they managed to mess something as fundamental as this up so much. Because they don’t care, lose a partner, another will replace it. As simple as it is…

This is completely valid feedback and thank you @Jon_Purvis for your detailed post and explanation. We will be addressing this to make sure the exchange is more resilient to these scenarios.

Thank you for validating this and committing to making the exchange more resilient going forward @TerenceShopify . However, we need clarity on how Shopify plans to handle stores that are already in a broken authentication state right now. A forward-facing fix prevents new failures, but it doesn’t h…

That’s a pretty short-sighted way of looking at it. Sure, another partner might take their place, but an ecosystem built on “someone else will replace you” isn’t a healthy one.

[image] Jon_Purvis: isn’t a healthy one Exactly, I don’t think Shopify is an healthy ecosystem right now and I wouldn’t recommend anyone starting a business related to it today. I do think that they don’t care about partners individually, as they don’t care about individual merchants, as long…

@TerenceShopify Please could we get an update on this? Is Shopify working on a backfill mechanism or recovery flow to restore authorisation for already-affected stores?

Hi Jon - yes we’re actively working on both. We should have an update live soon that addresses the initial token exchange resiliency. We’re also working on providing better long term recovery paths for acquiring access tokens from stores when the app has lost its valid refresh tokens.

Hi @TerenceShopify Thank you for keeping us updated of what you’re currently working on. It’s appreciated.

FYI we’ve changed the token exchange process when exchanging non-expiring access tokens for expiring access tokens (with refresh tokens). TL;DR: this process can now be repeated for up to seven days, allowing for apps to perform the exchange again if the new expiring tokens fail to be stored during…

[image] Jon_Purvis: Shopify is full of smart people, so I don’t understand how they managed to mess something as fundamental as this up so much. For sake of your business & sanity I suggest to you to reconsider your position on this topic as soon as possible and adjust accordingly. Shopify t…

Please add recovery parity with refresh tokens

Authentication & Access

Jon_Purvis October 9, 2026, 7:57am 26

This thread is like a ghost town as far as Shopify is concerned

Tumbleweed Rolling Through Desert Landscape

Very few companies are this bad at communicating, it’s actually impressive

Topic		Replies	Views
Action required: existing public apps must use expiring offline access tokens by January 1, 2027 Authentication & Access oauth	33	2234	September 17, 2026
Migrating from non expiring to expiring access tokens Authentication & Access oauth	214	6893	November 8, 2026
Disaster recovery for expiring offline tokens: any path back after a database restore? Authentication & Access oauth	17	1161	September 9, 2026
Action required: migrate to expiring offline access tokens before January 1, 2027 Authentication & Access oauth	34	697	November 6, 2026
Is the offline-token migration exchange (non-expiring → expiring, expiring=1) idempotent and safe to retry? Authentication & Access oauth , access-scopes	10	334	July 16, 2026

Please add recovery parity with refresh tokens

Related topics